---
title: "'The npm package ownership process is flawed..'"
publication: "Node Weekly"
issue: 275
published_at: "2019-02-14"
canonical_url: "https://nodeweekly.com/issues/275"
---

The latest Node.js news, articles, tools, and projects.       

#275 — February 14, 2019 

[Read on the Web](https://nodeweekly.com/issues/275)   

Node Weekly 

[![\](https://res.cloudinary.com/cpress/image/upload/w_1280,e_sharpen:60/ynvncxa1kbsmkhatfo24.jpg)](https://www.pikapkg.com/blog/introducing-pika-pack/)   

[Pika/Pack: A New Approach to npm Package Building](https://www.pikapkg.com/blog/introducing-pika-pack/) — Pack connects pre-configured plugins (e.g. Babel and Rollup) to build and optimize your package for you. It’s a bit like a webpack or Parcel but specifically for building npm packages. 

Fred K. Schott   

[Next.js 8 Released](https://nextjs.org/blog/next-8/) — [Next.js](https://nextjs.org/) is a popular React-oriented framework for building universal and otherwise server-side apps using React. This new release brings serverless deployment support, several key performance improvements and smaller initial HTML size. 

Neutkens, Davis and Ding   [![\](https://copm.s3.amazonaws.com/047af39c.png)](https://slackfrontiers.com/2019?utm_medium=email&utm_source=cooperpress&utm_campaign=fy20q102-cooperpress-frontiers) 

[Learn a Thing or Two (Or Three) About Building Apps on Slack](https://slackfrontiers.com/2019?utm_medium=email&utm_source=cooperpress&utm_campaign=fy20q102-cooperpress-frontiers) — Whether you’re new to Slack or an expert app builder, there’s something for everyone at Frontiers. New this year: 3 tracks filled with speakers, sessions and workshops — including one designed just for you. Register today to reserve your spot. 

Slack sponsor   

['The npm package ownership process is flawed..'](https://news.ycombinator.com/item?id=19156996) — If you don’t respond to an email within 30 days, could someone else be added as an owner of your npm package? A weird story, this. Meanwhile, it seems someone may have [_sold_ their npm package name](https://github.com/nodejs/package-maintenance/issues/77#issuecomment-463356844) to someone else. 

Max Irwin on Hacker News   

▶[The State of Node.js](https://www.youtube.com/watch?v=DFF9eOlTWzY#t=31m52s) — Michael Dawson, Node.js’s TSC co-chair, gives a 13 minute ‘state of the union’ of where Node is at release-wise, what new features have arrived since Node 10, and what they’re working on next. _(This talk starts at 31:52 if you’re sent to the beginning for some reason.)_ 

Michael Dawson   

[DeskGap: A Lightweight Alternative to Electron](https://deskgap.com/) — A new, lighter weight way to build cross-platform desktop apps with Node, HTML and CSS. It’s lighter than Electron as it doesn’t bundle Chromium and instead relies on the operating system’s own webview control. 

Chi Wang  

💻 Jobs  

[Sr. Back-End Developer - Node/Mongo/Angular/AWS (Atlanta)](http://florencehc.com/careers/sr-back-end-nodejs-developer) — Growing HealthIT startup with modern stack. Major focus on company culture and prof. development. Competitive comp+options. 

FLORENCE   

[100+ Node.js and JavaScript Roles on hackajob 🎉](https://hackajob.co/p/discover?utm_source=cooperpress&utm_medium=paid&utm_campaign=nw_feb-14&utm_term=nodejs) — Upload your GitHub projects and we'll do the rest. Find a role based on your skills, average salary £70k. 

hackajob  

📘 Tutorials and Opinions  

[Processing Large Volumes of Data Safely using Node and Postgres](https://medium.com/@gajus/processing-large-volumes-of-data-safely-and-fast-using-node-js-and-postgresql-6aa62392cadb) — About designing a Postgres client for Node.js. 

Gajus Kuizinas   

[Back-Off and Retry using Arrays and Promises](https://philbooth.me/blog/back-off-and-retry-using-javascript-arrays-and-promises) — If you’re calling third-party services you might need to adhere to rate limits and back off and retry again later if you hit them.. 

Phil Booth   

[Boosting JavaScript: from MongoDB's Shell to Node.js](https://www.mongodb.com/blog/post/boosting-javascript-from-mongo-shell-to-nodejs?jmp=cpress&utm_campaign=WW_CP_newsletter_sponsorship&utm_content=20190208&utm_medium=display&utm_source=nodeweekly) — Moving a script from MongoDB’s JavaScript-powered shell to Node.js offers a chance to get to use an enormous range of tools and libraries. 

MongoDB sponsor   

[Instrumenting HTTP Requests in Node](https://medium.com/@tlivings/instrumenting-http-requests-in-node-5bf48c10f1c0) 

Trevor Livingston   

[HTML Snapshot Testing with Node](https://spin.atomicobject.com/2019/02/13/html-snapshot-testing-with-node/) — Using Node for snapshot testing of HTML files generated for inclusion in daily report emails. 

Jordan Nelson   

[10 Node Frameworks Worth Checking Out: Express, Loopback, Hapi, & Beyond](https://medium.freecodecamp.org/10-node-js-frameworks-worth-checking-out-express-loopback-hapi-and-beyond-7b537b590f89) — A basic run-down but might put some new things on your radar. 

Sanjay Ratnottar  

🔧 Code and Tools  

[deploy-to-kube: Deploy Your Node App to Kubernetes with a Single Command](https://github.com/kubesail/deploy-to-kube) — Supports any Kubernetes cluster whether self hosted or on Google, Amazon, Digital Ocean, etc. Or even [KubeSail’s free environment.](https://kubesail.com/blog/deploying-node-apps-the-right-way) 

KubeSail   

[BundlePhobia: Find The Cost of Adding An npm Package to Your Bundle](https://bundlephobia.com/) 

Shubham Kanodia   

[Debug Faster With Context Based Logging](https://timber.io?utm_campaign=platform_feelers&utm_source=cooperpress&utm_medium=node_weekly) 

Timber.io sponsor   

[Redactyl.js: Redact Sensitive Information From JSON for Logging](https://github.com/rcjpisani/redactyl.js) — Love the name of this. Redactyl recursively looks through JSON objects ensuring appropriate things are redacted for logging purposes (e.g. passwords or API keys). 

Robert Pisani   

[Qoa: Minimal Interactive Command-Line Prompts](https://github.com/klaussinani/qoa) — No dependencies. Supports 7 types of user input control at the terminal. 

Klaus Sinani   

[Smoke: Simple File-Based Mock Server with Recording Abilities](https://github.com/sinedied/smoke/) — For example, create a file called `people.json` with a JSON object in it, and it’ll get served up at `/api/people`. 

Yohan Lasorsa   

[git-history: Quickly Browse the History of any GitHub File](https://github.com/pomber/git-history) — Can be easily run using `npx` too. 

Rodrigo Pombo   

[role-acl: Role Based Access Control using Actions, Attributes and Conditions](https://github.com/tensult/role-acl) — An extension of [AccessControl.](https://github.com/onury/accesscontrol) 

tensult   

[Motrix: A Full-Featured Download Manager in Electron](https://github.com/agalwood/Motrix) — Always neat to see a full open sourced Electron app as there’s often something to learn from it. 

Dr Root         

Curated by [Cooperpress](https://cooperpress.com/) and [Peter Cooper](https://twitter.com/peterc) 

[Change your email address](https://nodeweekly.com/edit_subscription/*|UID|*) or[Stop getting this newsletter](https://nodeweekly.com/leave/*|UID|*) 

© Cooper Press Ltd · Fairfield Enterprise Centre, Louth, LN11 0LS, United Kingdom